#bitwarden #passwords #tool #autotype #autofill

app bitwarden-autotype

The missing desktop-autotype for Bitwarden

5 releases

0.1.6 Jun 16, 2021
0.1.5 Jun 15, 2021
0.1.0 May 31, 2021

#372 in Authentication

MIT license

34KB
627 lines

icon bitwarden-autotype

The missing desktop-autotype for Bitwarden.

Autotype/Autofill support has been a requested feature in Bitwarden for years, yet no progress seems to have been made. Queue the Thanos GIF!

thanos

Features

  • Log into your Bitwarden Vault
  • Use a global hotkey (Ctrl-Alt-A) to trigger autotyping
  • Configurable hotkey
  • Match window titles or executable names against Bitwarden Login URLs
  • Choose between multiple matching Logins
  • Autotype following the {USERNAME}{TAB}{PASSWORD}{ENTER} Pattern
  • Custom Autotype Patterns (see #1)
  • Autotype in windows with elevated permissions (see #5)
  • Ability to sync your Vault automatically and manually
  • Pretty UI

How To

  • Install Bitwarden CLI
  • In Bitwarden, set up your login's URL to match the window's title. You may use any match detection for this:
    • Default match detection, Base domain & Host: Wouldn't recommend, since they're geared towards URLs rather than window titles.
    • Starts With: Self-explanatory.
    • Regular expression: The most powerful and versatile option, for example the RegEx .* - Mozilla Firefox would match any Firefox windows.
    • Exact: What it says on the tin - either the window title matches perfectly, or it's out.
    • Never: Why?
  • Download the latest release
  • Run the program
  • A tray icon appears to signal the program is running. Right click it for more option & information.
  • Log into Bitwarden
  • In the window you set up the URL for, hit the Autotype hotkey
  • Feel the magic flow through you

Custom Autotype Patterns

If you want to define your own patterns, you can do so in your Login's Notes. Suppose you wanted to only type the password and hit enter, you'd add this line to your Login's Notes:

Autotype: {PASSWORD}{ENTER}

(Note: the space after Autotype: is required)

You can specify any pattern you want. Supported are:

  • Any Character (some exotic unicode chars may lead to breakage, please report any bugs) except newlines (use {ENTER})
  • {ENTER} to simulate the enter/return key
  • {TAB} to simulate the tab key
  • {USERNAME} to type your login's username field
  • {PASSWORD} to type your login's password field
  • {TOTP} to type the login's two-factor authentication code
  • {SLEEP=X} to pause typing for X milliseconds

Caveats

This is a third party program, not affiliated in any way with Bitwarden. It does not store your logins in any way, but it could. If you don't trust me and cannot read this code, don't use it.

While this program doesn't store your master password, it has to store a session token so you don't have to enter your password every time you want to Autotype. A malicious program on your PC might be able to steal this token from this program's memory. This may also be true for the official Bitwarden client, though. I'm not a security researcher.

Autotyping has inherent risks. For example, if you hit a hotkey while in your favourite chat program, and have URLs set up to match that program's window title, this program will happily broadcast your username & password to the entire chatroom.

This is free software, offered without warranty or liability. I've done my best to create a program I myself can use daily, but don't sue me if it eats your kitten!

Acknowledgements

Like almost all End-user software, this program rides upon the tip of massive open-source iceberg; thousands and thousands of hours of work which I cannot claim credit for.

Special mentions include (but are not limited to!) David Tolnay, the fltk- and fltk-rs Contributors, and everyone working on The Rust Programming Language.

Thank you all for the ecosystem you helped create.

Dependencies

~18–27MB
~436K SLoC